Skip to content

[pull] 2.x from Kovah:2.x - #41

Merged
pull[bot] merged 43 commits into
briorg:2.xfrom
Kovah:2.x
Jul 2, 2026
Merged

pull[bot] merged 43 commits into
briorg:2.xfrom
Kovah:2.x

Conversation

@pull

@pull pull Bot commented Jul 2, 2026 •

Copy link
Copy Markdown

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

Mathieu Clabaut and others added 30 commits June 24, 2026 22:25
The search page is reachable at /guest/search when guest access is
enabled, and respects public-only visibility for both links and
their tags. The SearchesLinks trait gains a baseQuery() hook so the
guest controller can scope to publicOnly() without duplicating
filter logic. Admin-only filters (visibility, broken_only,
empty_tags, empty_lists) are rejected at validation.
- Switch from POST to GET so paginator query strings carry the search
   inputs instead of dropping them on page 2+. The controller now has a
   single `search()` action that detects whether any field is filled.
- Scope `whereHas('tags'|'lists')` to publicOnly() in the guest path so
   a guest cannot probe private tag/list IDs to learn which public links
   they're attached to. The trait gains `filterByLists()` / `filterByTags()`
   hooks that the guest controller overrides.
- Validate `query`, `only_lists`, `only_tags` as strings so array inputs
   (e.g. `only_tags[]=1`) are rejected at validation rather than producing
   a 500 inside preg_match()/json_decode().
dependabot Bot and others added 13 commits June 29, 2026 01:02
Bumps the npm-minor group with 2 updates: [postcss](https://github.com/postcss/postcss) and [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).


Updates `postcss` from 8.5.15 to 8.5.16
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.15...8.5.16)

Updates `vite` from 8.0.16 to 8.1.0
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/create-vite@8.1.0/packages/vite)

---
updated-dependencies:
- dependency-name: postcss
  dependency-version: 8.5.16
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: vite
  dependency-version: 8.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps the composer-minor group with 3 updates: [guzzlehttp/guzzle](https://github.com/guzzle/guzzle), [league/flysystem-aws-s3-v3](https://github.com/thephpleague/flysystem-aws-s3-v3) and [masterminds/html5](https://github.com/Masterminds/html5-php).


Updates `guzzlehttp/guzzle` from 7.12.1 to 7.12.3
- [Release notes](https://github.com/guzzle/guzzle/releases)
- [Changelog](https://github.com/guzzle/guzzle/blob/7.12/CHANGELOG.md)
- [Commits](guzzle/guzzle@7.12.1...7.12.3)

Updates `league/flysystem-aws-s3-v3` from 3.34.0 to 3.35.1
- [Commits](thephpleague/flysystem-aws-s3-v3@3.34.0...3.35.1)

Updates `masterminds/html5` from 2.10.0 to 2.10.1
- [Release notes](https://github.com/Masterminds/html5-php/releases)
- [Changelog](https://github.com/Masterminds/html5-php/blob/master/RELEASE.md)
- [Commits](Masterminds/html5-php@2.10.0...2.10.1)

---
updated-dependencies:
- dependency-name: guzzlehttp/guzzle
  dependency-version: 7.12.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: composer-minor
- dependency-name: league/flysystem-aws-s3-v3
  dependency-version: 3.35.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: composer-minor
- dependency-name: masterminds/html5
  dependency-version: 2.10.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: composer-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps the actions group with 2 updates in the / directory: [actions/checkout](https://github.com/actions/checkout) and [actions/cache](https://github.com/actions/cache).


Updates `actions/checkout` from 6 to 7
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v6...v7)

Updates `actions/cache` from 5 to 6
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@v5...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/cache
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@pull pull Bot locked and limited conversation to collaborators Jul 2, 2026
@pull pull Bot added the ⤵️ pull label Jul 2, 2026
@pull
pull Bot merged commit 9857674 into briorg:2.x Jul 2, 2026
1 check passed
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant